This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LkbAD6fxWlaDk4RwL359ieIzfT0.roa File: LkbAD6fxWlaDk4RwL359ieIzfT0.roa (raw, json) Hash identifier: HBVyoyVvbD4GsHKNr6dIBg1rZq5+WURFn08pudn8BD4= Subject key identifier: 2E:46:C0:0F:A7:F1:5A:56:83:93:84:70:2F:7E:7D:89:E2:33:7D:3D Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B9D32DA4D878BE7411941E673D9DEB511 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LkbAD6fxWlaDk4RwL359ieIzfT0.roa Signing time: Thu 08 Jan 2026 10:41:54 +0000 ROA not before: Thu 08 Jan 2026 10:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 45.132.27.0/24 maxlen: 24 185.155.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:32:da:4d:87:8b:e7:41:19:41:e6:73:d9:de:b5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 8 10:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e46c00fa7f15a56839384702f7e7d89e2337d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:ce:bb:48:be:a5:95:58:59:3a:e6:89:bd: e1:f3:e3:6f:54:ab:4f:01:f7:80:c0:1e:d2:d1:db: c8:0b:7b:48:af:33:a8:ec:2e:f6:f6:f6:e0:cf:c9: 01:42:13:d5:a4:be:73:6c:a2:ed:fc:f3:09:d5:bc: ed:be:c9:34:99:9e:c6:1c:df:65:c6:eb:f2:c0:50: b4:83:02:63:b1:3a:28:f1:a1:7f:e9:b9:f2:cb:c0: 8b:9f:7d:36:7e:7e:fd:ef:c9:58:07:74:96:10:60: af:a4:55:dd:59:53:26:9d:d3:44:02:c5:5c:4b:8c: bc:2e:b4:d8:58:0a:b5:ab:25:e5:80:d9:47:8d:ca: ac:99:3d:dc:8d:51:24:b4:0e:7b:1a:cb:a3:ca:5c: 43:99:08:ac:83:4a:6e:01:1b:28:e2:2b:21:fe:32: 38:0e:0c:c2:49:96:d8:be:e4:6a:51:17:26:1e:99: 3c:83:75:cc:33:0a:ae:4e:75:2a:fd:cc:5e:21:37: 3a:d2:de:ab:15:8a:b3:4e:6d:d5:c7:e2:2f:6f:7b: 91:cc:a8:e5:bb:33:1d:dc:ac:4f:63:83:9d:f7:2a: 6a:d1:2a:bf:5c:38:86:7f:42:b7:2a:9c:95:3b:ec: 44:c3:7d:94:3a:78:2f:f6:aa:77:0c:58:77:1a:32: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:C0:0F:A7:F1:5A:56:83:93:84:70:2F:7E:7D:89:E2:33:7D:3D X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LkbAD6fxWlaDk4RwL359ieIzfT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.27.0/24 185.155.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:69:70:0d:39:06:64:8e:68:5d:b5:ac:f1:99:18:33:76:51: 2d:7b:62:74:64:ff:bf:ac:28:24:60:3c:fd:a5:e6:98:23:f4: fa:e2:e4:bc:db:f4:1f:5e:eb:f4:59:25:b0:d0:71:16:5d:76: ef:2b:08:5d:08:24:ad:f5:fc:8d:c7:1c:eb:35:ed:1b:e2:9b: 1b:93:1a:da:59:9e:f2:e1:c0:3e:01:05:b2:84:18:9e:a1:df: cb:98:0f:c3:c6:87:73:1e:3b:32:d5:62:13:82:03:2e:c5:83: dc:4e:ad:e8:6d:28:1a:29:06:77:42:a5:34:fb:4c:9f:a3:7b: 28:b5:09:2f:07:da:f9:db:2a:2d:44:7b:c3:fa:78:b1:bf:60: 10:3b:0f:c1:c9:3f:3c:67:17:37:49:03:88:b4:c3:eb:0b:03: 79:f3:e7:07:f3:41:30:e5:f4:3f:90:be:de:1a:fd:7b:e4:19: 3c:cd:52:3b:c1:dd:f9:6d:06:43:75:f3:d4:d9:98:0c:51:bd: 7f:8c:7a:9a:dd:89:b5:8c:83:3b:ef:4e:a7:01:b0:2b:7a:d7: bc:03:97:81:72:5e:1c:e1:88:8b:0d:89:ff:d2:39:ad:c9:4c: 9b:42:2a:a6:a7:8f:2d:d5:c4:e2:11:e3:6a:e3:f6:f9:be:c7: c4:f8:e6:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZudMtpNh4vnQRlB5nPZ3rURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjYwMTA4MTA0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTQ2YzAwZmE3ZjE1YTU2ODM5Mzg0NzAyZjdlN2Q4OWUyMzM3ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznfOu0i+pZVYWTrmib3h8+NvVKtP AfeAwB7S0dvIC3tIrzOo7C729vbgz8kBQhPVpL5zbKLt/PMJ1bztvsk0mZ7GHN9l xuvywFC0gwJjsToo8aF/6bnyy8CLn302fn7978lYB3SWEGCvpFXdWVMmndNEAsVc S4y8LrTYWAq1qyXlgNlHjcqsmT3cjVEktA57GsujylxDmQisg0puARso4ish/jI4 DgzCSZbYvuRqURcmHpk8g3XMMwquTnUq/cxeITc60t6rFYqzTm3Vx+Ivb3uRzKjl uzMd3KxPY4Od9ypq0Sq/XDiGf0K3KpyVO+xEw32UOngv9qp3DFh3GjLnVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC5GwA+n8VpWg5OEcC9+fYniM309MB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTGtiQUQ2ZnhXbGFEazRSd0wzNTlpZUl6ZlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYQbAwQA uZs3MA0GCSqGSIb3DQEBCwUAA4IBAQCMaXANOQZkjmhdtazxmRgzdlEte2J0ZP+/ rCgkYDz9peaYI/T64uS82/QfXuv0WSWw0HEWXXbvKwhdCCSt9fyNxxzrNe0b4psb kxraWZ7y4cA+AQWyhBieod/LmA/DxodzHjsy1WITggMuxYPcTq3obSgaKQZ3QqU0 +0yfo3sotQkvB9r52yotRHvD+nixv2AQOw/ByT88Zxc3SQOItMPrCwN58+cH80Ew 5fQ/kL7eGv175Bk8zVI7wd35bQZDdfPU2ZgMUb1/jHqa3Ym1jIM7706nAbArete8 A5eBcl4c4YiLDYn/0jmtyUybQiqmp48t1cTiEeNq4/b5vsfE+ObV -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client